CVE-2004-1836

Published: Dec 31, 2004Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in index.php in Invision Power Top Site List 1.1 RC 2 and earlier allows remote attackers to execute arbitrary SQL via the id parameter of the comments action.

Affected (3)

Products: Invision Power Services: Invision Power Top Site List

Invision Power Services

1 product

Invision Power Top Site List

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Invision Power Services Invision Power Top Site List	Version 1.0
Invision Power Services Invision Power Top Site List	Version 1.1
Invision Power Services Invision Power Top Site List	Version 1.1_rc2